Privacy Policy

1. Introduction

Welcome to Typestream ("we", "our", or "us"), a developer-first speech-to-text API service. Typestream is a brand owned and operated by Small Experiments LLP (UEN T26LL0245C), registered in Singapore.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (typestream.dev), access our developer dashboard, or integrate our API into your applications.

Our Core Privacy Philosophy: We believe your data is yours. Typestream is built on an ephemeral architecture, meaning we process audio to text and immediately discard the underlying content.

2. Zero Data Retention Policy (Audio & Transcripts)

The core function of Typestream is to provide fast, accurate speech-to-text capabilities. We handle your audio data with the strictest privacy standards:

• No Storage of Audio or Transcripts: Typestream operates on a "Zero Data Retention" model for your payload data. We process incoming audio streams in memory to generate the text transcript and immediately delete both the audio and the resulting text from our servers once the API response is successfully sent back to your application.
• No AI Training: We do not use your audio data, transcripts, or end-user voice samples to train, retrain, or improve our proprietary machine learning models.
• Subprocessor Retention for Legal Compliance: While Typestream does not store your data, we utilize secure, enterprise-grade third-party subprocessors (such as foundational cloud infrastructure providers) to facilitate the transcription process. These subprocessors may temporarily log or retain audio and transcript data for a maximum of 30 days strictly for legal compliance, abuse prevention, and trust & safety purposes. After this 30-day period, the data is permanently deleted by the subprocessor.

3. Information We Collect

While we do not retain your audio payloads, we do collect information necessary to operate our service, manage your account, and bill you accurately.

A. Information You Provide to Us

• Account Information: When you register for a developer account, we collect your name and email address from your OAuth provider.
• Payment Information: We use a third-party payment processor (Stripe) to handle payments. We do not store your full credit card details on our servers. We only retain billing metadata necessary for your pay-as-you-go usage. Auto top-ups, if set, are directly handled by Stripe.

B. Information Collected Automatically

• Usage Data & API Metadata: To calculate your pay-as-you-go billing and monitor API performance, we collect metadata about your API requests. This includes request timestamps, audio duration (in seconds), API response times, error codes, and your unique API key identifier. This metadata never contains the contents of the audio or the transcripts.
• Log Data: Like most online services, our servers automatically record information that your browser or application sends whenever you interact with Typestream. This includes IP addresses, browser types, and referring pages.

4. How We Use Your Information

We use the information we collect (excluding audio/transcripts) to:

• Provide, operate, and maintain the Typestream API and dashboard.
• Process transactions and send related information, including invoices and billing confirmations.
• Manage your account and API keys.
• Monitor and analyze trends, usage, and API latency to improve technical performance.
• Detect, investigate, and prevent fraudulent transactions, API abuse, and other illegal activities.
• Send administrative notices, technical alerts, and customer support responses.

5. Sharing Your Information

We do not sell, rent, or trade your personal information. We may share your information only in the following situations:

• Service Providers & Subprocessors: As mentioned in Section 2, we share data with trusted third parties who assist us in operating our API, conducting our business, or processing payments. These parties are bound by strict confidentiality and data protection agreements.
• Legal Requirements: We may disclose your information if required to do so by law, or in response to a valid request by public authorities (e.g., a court or government agency).
• Business Transfers: If Small Experiments LLP is involved in a merger, acquisition, or asset sale, your developer account information may be transferred as a business asset.

6. Data Security

We implement industry-standard security measures, including TLS/HTTPS encryption for all API traffic, secure credential hashing, and strict access controls, to protect your account information and metadata from unauthorized access, alteration, or destruction.

7. Your Data Rights

Depending on your location (such as under the GDPR, CCPA, or Singapore's PDPA), you may have the right to:

• Access the personal information we hold about you.
• Request the correction of inaccurate information.
• Request the deletion of your developer account and associated personal data.
• Withdraw consent for marketing communications.

To exercise these rights, please contact us using the information provided below.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the updated policy on our website and, where appropriate, sending an email to the address associated with your developer account.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: